Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/D9FB55FA94B911EEB2773066C4F9AE02.roa
File: D9FB55FA94B911EEB2773066C4F9AE02.roa (raw, json)
Hash identifier: yEjZzFpFfNk7ESdnyvADtsVMHMIYts+0900mfy3bfKc=
Subject key identifier: 46:12:30:24:77:D4:03:4B:D6:A1:D9:8A:48:80:74:A5:A8:2F:38:3D
Certificate issuer: /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial: 7C
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/D9FB55FA94B911EEB2773066C4F9AE02.roa
Signing time: Thu 07 Dec 2023 04:34:04 +0000
ROA not before: Thu 07 Dec 2023 04:34:04 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 395839
IP address blocks: 103.92.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 02:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Validity
Not Before: Dec 7 04:34:04 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=65714b3c-4658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:86:ce:5f:76:b2:e2:62:d6:e3:5a:0f:c2:
80:fa:f2:96:7a:7b:89:b4:a9:7f:52:2f:f0:c2:a7:
e7:9e:c3:cc:de:22:30:1b:ab:a3:b2:34:a3:32:e6:
01:19:c4:23:23:65:41:09:ae:83:c6:f6:0a:88:2b:
6f:c1:9c:0b:a0:6e:5b:cc:d6:92:f3:66:fb:da:54:
4a:50:6a:a0:0d:c1:e9:f2:5a:9a:3c:ce:c3:9c:c9:
19:f6:64:65:e9:2a:64:5a:54:ac:1e:00:18:5d:27:
55:9f:35:75:c3:e0:2a:dc:9c:21:39:f6:db:ea:a4:
4b:72:91:a9:cf:47:fb:74:ae:22:f5:f0:72:a6:fe:
c1:f9:5c:c0:77:2f:17:5f:e8:c4:82:0f:c8:be:40:
94:20:7f:d7:72:ea:78:df:08:34:58:aa:07:d9:08:
96:c9:3e:53:c9:52:e3:25:a6:5c:4a:f5:25:81:d8:
7e:41:c1:f3:7f:0e:6a:17:d1:f1:4c:dd:ec:07:b4:
0b:32:1e:6c:93:34:5a:5e:93:47:f4:f7:78:f4:38:
c5:ea:02:fa:97:00:98:9b:b4:44:a4:e7:44:59:b0:
f2:6c:29:5f:20:74:9c:94:70:1a:b3:5e:56:0e:77:
fb:a9:e0:8f:63:5d:ef:a3:21:0d:eb:b8:60:6d:a2:
f7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:12:30:24:77:D4:03:4B:D6:A1:D9:8A:48:80:74:A5:A8:2F:38:3D
X509v3 Authority Key Identifier:
keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/D9FB55FA94B911EEB2773066C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.92.146.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:65:c2:a1:9d:93:f2:f2:17:28:62:9e:4b:3f:e2:d5:2a:90:
28:6c:0c:53:d0:c9:f3:5e:58:ee:59:1b:3c:08:9c:75:69:12:
8d:98:d8:dd:c9:b0:5c:8e:5c:be:99:e6:4a:68:75:73:9b:a0:
98:ed:6f:49:76:34:e1:ab:1c:13:0e:bf:4a:69:0b:bb:50:8a:
b3:9f:2a:7c:95:c4:c3:39:e1:22:99:43:a4:c4:17:f1:b6:82:
5c:5f:b3:78:e3:f9:45:c5:12:00:6a:02:3a:31:85:75:1f:b0:
4d:17:d8:96:4e:fa:ef:87:97:03:21:d0:da:1a:a7:83:40:66:
dc:18:5d:75:51:c7:fc:c3:9a:db:18:39:1c:37:5f:db:c0:b0:
60:45:f4:d3:73:5f:7e:8f:0c:7d:be:65:e9:60:40:59:ad:88:
f0:62:60:f7:3c:4d:b1:6f:b0:f3:53:f0:e9:74:c0:f1:5e:ab:
64:71:0e:5d:e1:ce:81:f0:90:02:67:bb:72:f7:7e:c6:72:a9:
a8:29:1b:7e:a4:bd:c8:06:8d:09:24:fd:7e:62:66:32:62:92:
95:9c:18:ac:f4:87:d2:9a:46:de:81:56:17:7c:d8:3a:5d:4c:
4a:9f:3b:75:d3:71:fb:89:78:d1:92:41:48:27:14:54:dc:38:
bd:06:09:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-ams.rpki-client.org